Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File:                     6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier:          xckS7VxP/T0OohiaHafhj/bNESLMQ/NY1umWrPcRIi8=
Subject key identifier:   38:E1:93:3F:8A:16:FC:AA:F4:06:98:6D:26:03:91:82:3C:79:CA:5E
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer:       /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial:       01A0D49438D222B1A3B3D6DC0AC66FB2AFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 18:01:18 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:18 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:18 +0000
Files and hashes:         1: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: iKmeTmOkUR9ay68hvw0TRmG29bjz268lxGMFh+yBFEk=)
                          2: kyiZYLBaKIrj5tT8RkwqZracJC8.roa (hash: vKqajVq23PYVXFkY+10uAWZKmF5NFtLP9M4UhXMBcyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:38:d2:22:b1:a3:b3:d6:dc:0a:c6:6f:b2:af:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
        Validity
            Not Before: Sep 24 18:01:18 2026 GMT
            Not After : Sep 25 18:01:18 2026 GMT
        Subject: CN=38e1933f8a16fcaaf406986d260391823c79ca5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5e:20:23:84:d3:fb:fc:e5:75:74:b3:8c:2c:
                    ba:ae:67:49:71:90:0d:30:7e:c4:d5:a0:06:5c:09:
                    5a:b7:62:0e:9e:e6:ee:7f:76:3f:02:1b:e3:fe:20:
                    f9:55:f2:b6:96:f1:ef:77:ac:07:a2:69:da:9f:4d:
                    f5:70:9c:ed:5c:f1:07:b9:c0:9d:59:60:d4:87:ad:
                    a5:8a:3d:17:ce:60:78:59:d6:2d:02:73:dd:59:49:
                    1c:5a:db:ee:fc:b1:1f:23:f3:2f:b1:4f:75:ff:c7:
                    1c:d5:ae:4a:46:b4:3d:a8:7d:e5:81:32:5a:63:1d:
                    52:4f:e4:63:98:ef:79:80:84:14:6b:9a:35:cc:36:
                    2e:2f:86:71:05:b9:a6:6d:cf:2c:e5:0d:95:2f:6f:
                    cd:e9:d3:1c:df:5a:72:30:07:5a:b2:45:6d:20:9d:
                    fe:95:ca:85:b3:4f:e5:31:69:d9:68:2d:9b:b9:7c:
                    68:91:10:fc:ac:8f:15:1f:b9:b2:6c:04:62:b5:89:
                    ea:3c:19:24:a7:4f:24:f9:50:cf:c7:28:1b:ec:bb:
                    d4:d0:35:fe:5b:e7:23:d1:68:00:e1:b1:d8:80:b1:
                    b8:7c:88:aa:de:6b:7a:63:d7:6e:9f:69:23:83:7f:
                    0e:4b:38:85:95:80:d4:7d:33:23:56:91:e7:60:a4:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E1:93:3F:8A:16:FC:AA:F4:06:98:6D:26:03:91:82:3C:79:CA:5E
            X509v3 Authority Key Identifier:
                keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fa:b8:d4:0d:91:62:25:c1:1c:28:f4:39:11:b6:b0:f5:f6:
         a5:70:78:4a:e1:b3:14:0a:64:06:4f:ee:bf:a0:10:04:8c:b3:
         35:9c:45:d1:d1:54:4d:2b:f2:0d:89:1f:3e:58:5f:b3:64:1b:
         1f:c3:89:45:6c:dc:a0:b9:81:01:bb:3d:7f:d6:8b:97:f2:25:
         1c:39:d6:ca:8d:a2:a8:e8:83:bb:ae:e9:3d:0e:69:47:c4:47:
         dc:f1:33:ea:23:a3:d0:2d:2e:6a:b0:0a:ed:97:93:26:97:a2:
         a5:dc:2d:3d:97:e4:92:3a:8e:40:9b:24:0e:92:47:07:0d:f5:
         ec:e2:dd:1e:18:99:8f:b9:4a:7a:dd:01:f6:71:7d:b7:78:55:
         36:a0:4b:cc:a9:18:e0:24:47:3e:25:53:90:04:54:8a:56:7d:
         a4:1b:63:93:88:5f:b3:ca:6d:12:97:53:8d:58:0a:c0:7e:1a:
         b0:90:77:b3:bf:56:f3:b0:ad:c4:23:07:18:dd:88:d5:99:c5:
         12:05:bd:e2:27:4c:92:22:4d:ea:04:8d:09:ad:13:8b:57:dd:
         c0:d9:34:fe:4f:70:65:f2:e3:fb:da:c8:ae:49:e4:fc:a6:e4:
         47:5a:d4:3d:4e:b2:4c:1d:f8:d0:1f:a9:18:72:74:12:66:c7:
         ad:3e:cc:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlDjSIrGjs9bcCsZvsq/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDg3OGFhNTMwODE4OTNiYTUyODUyNGVmMTQzZWE5Mjcx
MzkyYjgwHhcNMjYwOTI0MTgwMTE4WhcNMjYwOTI1MTgwMTE4WjAzMTEwLwYDVQQD
EygzOGUxOTMzZjhhMTZmY2FhZjQwNjk4NmQyNjAzOTE4MjNjNzljYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F4gI4TT+/zldXSzjCy6rmdJcZAN
MH7E1aAGXAlat2IOnubuf3Y/Ahvj/iD5VfK2lvHvd6wHomnan031cJztXPEHucCd
WWDUh62lij0XzmB4WdYtAnPdWUkcWtvu/LEfI/MvsU91/8cc1a5KRrQ9qH3lgTJa
Yx1ST+RjmO95gIQUa5o1zDYuL4ZxBbmmbc8s5Q2VL2/N6dMc31pyMAdaskVtIJ3+
lcqFs0/lMWnZaC2buXxokRD8rI8VH7mybARitYnqPBkkp08k+VDPxygb7LvU0DX+
W+cj0WgA4bHYgLG4fIiq3mt6Y9dun2kjg38OSziFlYDUfTMjVpHnYKTg2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjhkz+KFvyq9AaYbSYDkYI8ecpeMB8GA1UdIwQY
MBaAFOjYeKpTCBiTulKFJO8UPqknE5K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hZDY0YmItZDUzOS00YThlLWIwZTYt
NWY4OWI4ODVmNzI5LzEvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hZDY0YmItZDUzOS00YThlLWIwZTYtNWY4OWI4ODVmNzI5
LzEvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfq41A2R
YiXBHCj0ORG2sPX2pXB4SuGzFApkBk/uv6AQBIyzNZxF0dFUTSvyDYkfPlhfs2Qb
H8OJRWzcoLmBAbs9f9aLl/IlHDnWyo2iqOiDu67pPQ5pR8RH3PEz6iOj0C0uarAK
7ZeTJpeipdwtPZfkkjqOQJskDpJHBw317OLdHhiZj7lKet0B9nF9t3hVNqBLzKkY
4CRHPiVTkARUilZ9pBtjk4hfs8ptEpdTjVgKwH4asJB3s79W87CtxCMHGN2I1ZnF
EgW94idMkiJN6gSNCa0Ti1fdwNk0/k9wZfLj+9rIrknk/KbkR1rUPU6yTB340B+p
GHJ0EmbHrT7M8Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:33:28 2026 by rpki-client